hello all I'm supposed to you use X509 format for signing .
I'm trying to sign the CPIO archive of a rpm . I need to package this signature inside the RPM. I can't add this part of CPIO archive as the generated signature varies from the signature of newly formed CPIO archive . I Tried adding the signature to the Signature tags in the Spec file (for testing purpose) but it did not work , Do i need to use any arbitary tag for this ? Is there any way that i keep these signatures as part of RPM but not as part of its CPIO archive ? thanks in advance regards srinivasan
